Email privacy Required
Send only what the message needs
Put only the data each message needs into it, and keep sensitive data out of subject lines and previews.
How to do it
A subject line shows on lock screens and in notifications. Never put health, money, passwords or account numbers there. Mask what you must show, such as the last four digits of a card. Link to a signed-in page for the full details instead of copying them into the email.
Example
Bad subject: Your test results for HIV are ready, Anna
Good subject: A new message is waiting in your account
How to check
Read the subject and preview of each template on a locked phone. Nothing shown would harm the recipient if a stranger saw it.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers email playbook: https://agentwranglers.se/playbook/email/email-privacy/email-data-minimisation.